My Oracle Support Banner

OVD 11g Group Searches Are Very Slow And Timing Out From Application After Applying Fork Join Plugin To The Join Adapter (Doc ID 1551089.1)

Last updated on APRIL 20, 2021

Applies to:

Oracle Virtual Directory - Version 11.1.1.6.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, i.e. 11.1.1.6.0.

OVD configuration:
- ou=staticgroups,dc=<DOMAIN>,dc=com
-------Group1
-------Group2
-------ou=XYZ (from LDAP server)
-------ou=ABC (from LDAP server)

Group search query - Query 1:

ldapsearch -h <OVD_HOSTNAME> -p 6501 -D cn=orcladmin -w <password> -b "ou=staticgroups,dc=<DOMAIN>,dc=com" -s sub "(&(objectclass=groupofuniquenames)(cn=*))" dn

Group membership search query - Query 2:

ldapsearch -h <OVD_HOSTNAME> -p 6501 -D cn=orcladmin -w <password> -b "ou=staticgroups,dc=<DOMAIN>,dc=com" -s sub "(uniqueMember=cn=my user,ou=employee,dc=<DOMAIN>,dc=com)"

In order to resolve the group-membership query, added a fork join plugin to the staticgroup join adapter (ou=staticgroups).  This worked to return results for membership of the groups, i.e. Query 2, but Query 1 then started running very slow.  In addition, due to the fork join, the ou=staticgroups now has entries from LDAP adapters which are not required.

Any searches on groupOfuniqueNames is searching in the entire structure which made OVD UI very slow and the search results are timing out from application.  For example, all group searches are taking ~2 minutes to return ~35 groups.

The required groups are Group1, Group2, and not the groups present in OUs of the LDAP servers.

If doing an ldapsearch with scope one,  then the performance is better and getting desired results in less time.

Need a solution to restrict search to scope one in staticgroup join adapter so that even if the client searches with scope subtree, it does not return all of those OU groups.

Changes

Added a forkjoin plugin to a staticgroup join adapter (ou=staticgroups).

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.